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SUMMARY 


The ability of a pilot to reconfigure the control surfaces on an airplane 
after a failure, allowing the airplane to recover to a safe condition for 
landing, becomes more difficult with increasing airplane complexity. 

Techniques are needed to stabilize and control the airplane immediately after 
a failure, allowing the pilot time to make longer range decisions. This paper 
shows a design of a discrete multivariable control law using four controls for 
the longitudinal channel of a B-737, allowing redundancy in two of the three 
airplane rigid body degrees of freedom. Single control element failures are 
allowed in three of the four controls. The four controls design and failure 
cases are analyzed by means of a digital airplane simulation, with regard to 
tracking capability and ability to overcome severe windshear and turbulence 
during the approach and landing phase of flight. 


INTRODUCTION 

As future commercial airplanes become more sophisticated, the advent of 
unanticipated control element failures become more probable and will be more 
difficult to resolve. Future airplanes are expected to have reduced static 
stability and some may be statlcaly unstable. There has been, and will 
continue to be, a proliferation of control surfaces. Primary control elements 
are taking on secondary functions (ref. 1) and in the future, primary control 
surfaces will probably be split into independently controlled surfaces. 
Automatic control systems will have increased complexity and capabilities such 
as fly-by-wlre (FBW) systems (ref. 2,3). 

With all of this capability, there are an unlimited number of ways things 
can go wrong, but only a sub-set of the failures can be anticipated with pre- 
planned specified procedures. There is a need to have a capability to 
automatically restructure the control laws of highly augmented airplanes to 
allow safe operation in the presence of unanticipated failures. Recent 
theoretical developments address some key elements of the overall 
restructurable control problem, a problem that is highly nontrivial and very 
Important, but additional problem focused research is required (ref. 4). 

A significant amount of progress has been made in fault tolerant areas 
related to sensors (redundancy management and analytical redundancy) and 
computers (self test procedures and designs). A major remaining reliability 
bottleneck is the control surface element failures (ref. 5). With recent 
advances in modem control theory, it is appropriate to Investigate fault 
tolerant approaches to accommodate control surface failures. Reconfigurable 
control law research has recently been documented with respect to military 
airplanes (ref. 6,7), but as yet no related work has been reported for 
commercial airplanes. 

For the research reported on in this paper, it is assumed that the 
sensors and computers are fully operational and that a failure occurs only in 
a control surface element. The objective of this research is to design a 
control law that allows the airplane to recover to a safe landing, even though 
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performance may be degraded. This present objective is for a reconf igurable 
control law design, which contrasts to the long term objective of a 
restructurable control law design, i.e., to automatically design the new 
control law on the airplane after detecting and identifying (FDI) the 
failure. A further assumption for this paper is that the FDI process supplies 
perfect information to the control logic. 


AIRPLANE MODEL AND CONTROL LAW STRUCTURE 


A B-737 airplane is used for the preliminary longitudinal control channel 
design since stability and control data, as well as a full six degree-of- 
freedom nonlinear simulation, is available at LaRC. In the existing airplane, 
the stabilizer position is dependent upon the elevator position and the 
spoilers can only be controlled automatically in the lateral-directional 
channel. However, for this study, it is assumed that four Independent 
controls are available: throttle, stabilizer, elevator, and spoilers. 

A PIF/CGT (proportional-integral-filter with command generator tracking) 
discrete control structure was selected for the reconf igurable control law 
because of properties that are appropriate for the task (ref. 8-15). PIF is a 
direct digital integrated formulation using linear dynamics for design. All 
control signals are rate-commands and the change from rate to control 
position-commands accommodate necessary computation delays. Proportional 
feedback of control position-commands allows additional filtering properties 
in each control channel. Only measurable states are being fed back and 
selected outputs are integrated to give type 1 control properties. Some of 
the integrated states are command tracking errors which are penalized in the 
cost function independent of the command model chosen. 

The command generator uses an output model following approach to emulate 
specific objectives, such as changes in altitude and velocity. Feedforward 
gains, connecting the command model to the control inputs, are calculated open 
loop , independent of the feedback gains . 

All equations are implemented in incremental form using total measurable 
quantities. This implementation has been shown to work well with nonlinear 
dynamics (ref. 13,14,15). Trim values are not needed in flight, as the 
airplane goes to a new equilibrium state as a function of slowly varying 
commands. Automatic trim capability is very important, and for many cases the 
control problem would be solved if trim can be established (ref. 16). 

The PIF/CGT structure has been combined with a stochastic discrete 
optimal output feedback formulation, for time invariant plants (ref. 17). 

Both proportional outputs and integral outputs are selected for the output 
feedback gains. A research effort that used the output feedback formulation 
and included constrained dynamic compensation is given in Reference 18. 


DESIGN EXAMPLE 

The longitudinal channel of a B-737 is used as the design case for the 
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reasons presented in the previous section. The design assumes four 
Independent controls: throttle 6 . stabilizer 6^* elevator and 

spoilers 6 biased at eight degrees. First order low frequency actuator 
dynamics are^assumed for the 6 . and 6^ channels, while the other two 
channels are assumed to have a fast response compared to the frequencies of 
interest. All results shown are based upon a point design for a three degree 
glideslope, airspeed V of 215 ft/s (127 Kt), weight 85,000 lbs., and CG 
equal to a 0.2 mean aerodynamic chord. The mathematical formulation for the 
design example is given in Appendix A. 


Output Feedback Gains 

The design example for perturbation equations (Al) and (A2) include 15 
states (Ax), 4 control rate-commands (Av) and 13 outputs (Ay). Components 
of the 15 PIF states and 13 outputs are 

rp 

Ax = [AU,AW,q,e,AZ,AX6^, AX6g | (D 

Au = [a6j.j^, A6g, A6g, A6gp|'”^ 

Az = [/AZdt, /AV dt, /A6 dt, /A6 dt| (3) 

3 G ® P 

Ay =• [av , AZ,q,A0,AZ,A6 , ,A6 ,A6 ,A6 , Az(l), Az(2), (4) 

Az(3) ,Az(4) I 

where Az(i) represents the i*"^ Integrator state in equation (3),AU,AW are 

body axis inertial velocity perturbation components, q is the pitch 

rate, A0 is the pitch attitude perturbation, AZ is the altitude 

error, AX6 , AX6 are states for the first order throttle and stabilizer 
t • s 

dynamics, AZ is the altitude rate perturbation, and all other variables have 
previously been defined* The 4 control rate— commands are the time 
differentials of the 4 components in equation (2). 

Appendix B includes the weighting approach with the corresponding 
weightings used in the peformance index and the optimal output feedback gains 
K used for the design example. Also included in this appendix are the command 
generator models with the associated feedforward gains* The closed loop 
eigenvalues (S) and damping ratios (C), calculated by inserting K into 
equation (A16), are shown for the 4 controls case in Table I* The first two 
complex eigenvalues represent the phugoid and short period modes respectively, 
and are shown next to the corresponding eigenvalues for the open loop plant* 
Bode data for the equivalent case is shown in the lower part of Table I, and 
includes the phase margin and gain margin at the corresponding radian 
frequency to* Bode data is obtained by opening each control channel separately 
at the control position-command input (Au). Figure 1 shows the Bode plots 
for each of the four control channels* All gain margins are better than the 6 
db classical design value, and only the 6^^ loop phase margin is somewhat 
less than 60 degrees* 

Failure detection and identification (FDI) is assumed operational with 
perfect information supplied to the control logic* An objective of the 
failure cases is to determine if a subset of the existing feedback gains can 
be used to maintain a safe flight condition, even though performance may be 
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degraded. The failure cases considered represent single failures in either 
the stabilizer, elevator, or spoiler control element. The throttle channel 
was not analyzed at this time since complete loss of thrust represents a 
noncontrollable case. The loss of one engine requires cross coupling 
derivatives and will be considered in the future. 

For each control element failure, a reconfigured control law is used, 
whereby, one row and two columns of K are set equal to zero. The nulled row 
corresponds to one of the failed control rate-commands (see eq.AlS) one nulled 
column corresponds to one of the control position-command states (see eq.2) of 
the failed channel and the second nulled column corresponds to an Integrator 

integrator state /a 6 dt is deleted for either a 
stabilizer failure or an elevator failure, and the integrator state /a 6 dt 
s deleted for a spoiler failure. The reasons for eliminating an IntegriEor 
state are (D to delete an obviously bad feedback measurement in the case of 

^ f usp (2) to allow the elevator freedom to search for a 

new Irim in the^'case of a 6^ failure and (3) to maintain an equal number of 
integrators and controls in order to maintain a unique solution for the 
feedforward control gains. 

«f T eigenvalues and Bode data are shown in the last three columns 

of Table I for each single failure case. Each case has 13 eigenvalues (as 
opposed to 15) and three control channels (as opposed to 4). Again the first 
wo complex eigenvalues represent the phugoid and short period respectively. 
Other eigenvalues have also been lined up with the corresponding eigenvalues 
rrom the 4 controls case. 

The phugoid is relatively constant for all cases analyzed, whereas the 
short period shows large variations for each of the three failure cases and, 
in addition, the damping ratios are reduced considerably for 
^e 6gp failures. All other closed loop eigenvalues remain relatively 
constant. Bode data appears satisfactory for all cases analyzed except for 
a 6g failure with the 6 loop open; the phase margin for this case is reduced 
to only 18 degrees. The smallest gain margin is 7.3 db for the same case, and 
the smallest phase margin, other than the case pointed out above, is 45 

eigenvalues (not 

shovm) for the 4 controls case and fof each failure case, under conditions of 
each control loop opened individually, are all stable except for the case of 

6 failure with the 6 loop open. There is a positive real eigenvalue at S 
=u.l tor this case. 

Closed loop eigenvalues and Bode data have also been calculated for the 
non-reconfi^red control law (no feedback gains altered) with control element 
failures. The closed loop eigenvalues for each non-re configured failure case 
are identical to the open loop eigenvalues calculated for the corresponding 
Bode plot in figure 1, where each control channel is opened separately. For 
t e case of a failed 6^, , there is a stable but very low damped phugoid mode 
“u” r/s). The Bode gain margin for this failure case is 

^°°P ^P®*^ "2*5 db with the 6 loop open 

while the phase margin is only 2.3 degrees with the 6 loop opin. This 
analysis, along with simulation results shown in the following section, 
illustrate that the reconfigured feedback control law provide the best 
results. 
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NONLINEAR SIMULATION 


The Incremental control law form that combines both the feedback and 
feedforward gains as described In equations (A28) to (A33) was evaluated In a 
6 degree of freedom nonlinear simulation to evaluate the design example cases 
(4 controls case and failure cases) described In the previous section of this 
paper. Since the design Is only for the longitudinal control channel, an 
existing autopilot was used to regulate lateral-directional perturbations. 

The evaluation Included both CGT with command changes In altitude 

• • 

rate h (-Z) and airspeed V (see equations B1 and B2) and wlndshear and 
turbulence penetration capalllltles. 


CGT Evaluation 

The CGT evaluation Included separate deceleration and acceleration 

• • • • 

commands h and V separated by constant h and V commands. The four 
in m 

command changes are (1) h equal to 2.5 ft/s/s during the 5 to 9 second time 

• • m 

period, (2) h equal to -2.5 ft/s/s during the 30 to 34 second time period, 

• in 

(3) V equal to -5 ft/s/s during the 55 to 60 second time period and 

• a,m 

(4) V equal to 5 ft/s/s during the 80 to 85 seond time period. 

a,m 


Simulation plots for the CGT 4 controls baseline design are shown in 
figure 2 . Both altitude errors (Ah) and airspeed errors (AV ), defined as 
the difference between the actual output and the commanded output, go to zero 
during the steady-state condition, demonstrating the type 1 control 
properties. Pitch attitude 0 settles at a new trim value. Two of the 
controls, 6^ and 6^ return to their trim states during the steady-state 
time periodsf forcing^ and 6^ to new trim states. 

Individual control failures on control elements 6,6, and 6 have 
been investigated for CGT evaluation. Figure 3 shows results for a^Son- 
reconfigured control law with a 6 failure at 10 degrees (trailing edge 
down). The low damped phugoid mode oscillation (0.99 r/s) is initially 
excited by the 6 step during failure. The same failure case for the 
reconfigured control law is shown in figure 4. After the initial transient 
response dies out, the command following capabilities are very similar to 
those shown in figure 2, with steady state errors Ah and AV going to 
zero. The stabilizer settles at a new trim value (-8 deg) to compensate for 
the 6 failure. Figure 5 illustrates a CGT evaluation for a 6 failure at 
neutral. The integrator on the 6 control is eliminated, allowing 6 to 
settle at a new trim value. ^ ^ 
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Control Authority To Overcome Stabilizer Failure 

A separate test was made to determine the control authority of 6 under 

conditions of 6^ failures other than at trim (-4.8 degrees) and with no 

external disturbances. The elevator command is position limited and rate 

limited and rate to +/— 10 degrees and +/— 10 degrees/second respectively. 

Simulation results show that 6 can overcome moments produced by a 

6s failure only over the range®from -1 to -8 degrees. Failures of 

6 outside this range cause 6 saturation. 

^ e 

Windshear and Turbulence Penetration 

The 4 controls design and failure case examples were evaluated for a 
three degree glideslope approach and landing under the condition of severe 
windshear and turbulence and with measurement noise characteristic of the 
sensors on the existing airplane. A Stanford Research Institute (SRI) data 
package available at Langley Research Center contains a reconstruction of the 
high severity windshear during the 1975 Eastern Airline crash at John F. 
Kennedy International Airport, with rms gust intensities up to 13 ft/second. 

A time simulation of the horizontal and vertical wind components are presented 
in figure 6; the top curves represent the windshear and the bottom curves 
represent windshear with turbulence. The time scale changes slightly in the 
simulation cases to be described due to variations in groundspeed V during 
each run. g ® 


Figures 7 and 8 contain simulation results for the 4 controls design, 
with one small but significant difference between them. Figure 7 shows 
results for the output Ay defined in equation (4) whereas results shown in 
figure 8 are for the case where the feedback gains on AV are divided in a 
linearly weighted manner between AV and AV . The modffied incremental 
equation for the first component Yj^tl) of equation (A28) becomes 

y. (1) = (l-c)V.+cV, C 5 ') 

k a,k g,k '‘^7 

where the coefficient c is calculated as 


c 


V 

a^ m 

50 


V 

,_S. 


0 < c < 1 


( 6 ) 


This modification does not alter the validity of the design analyses since the 
total velocity feedback gains remain unchanged, but the modification does put 
a lower limit on the allowable groundspeed. In most cases, V will have the 
larger component of feedback gain, and for the case of a tailwfnd, all of the 
feedback gain is applied to regulation of V . The limit of 50 ft/s is 

selected to prevent stall in case of a sudden wind change from headwind to 
tailwind. 


Comparison of the plots for states V , 0 and a and controls 6 and 
best illustrate the benefits of this modification. In figure 7,*^^ shows 
tight regulation through the peak headwind of approximately 60 ft/s at ^75 
seconds. At that time there is a sudden decrease in V due to the decreased 
headwind and Increased downdraft, resulting in a corresponding increase in 
6th maximum rate (10 deg/s) with position saturation (60 deg) shortly 

thereafter. The airplane also has a large increase in 0 with a corresponding 
control correction in 6 . Good regulation in is maintained during the 

run. ® 
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In contrast, figure 8 shows that 


V is allowed to increase during the 
large headwind, with the corresponding decrease being much smaller than the 
previous case. In addition, V never decreases very much below the commanded 
value, 6 , does not reach saturation, 0 remains relatively low during the 
severe time period, and a remains relatively constant throughout the entire 
approach and landing. The total run time is approximately 10 seconds shorter 
due to better regulation of . 

Flare occurs during the final 42 feet (approximately last 5 seconds) of 
each run. The objective is to land with a small pitch-up attitude 


(0 =» 1 to 2 deg) and a low rate of descent (h « -1 to -3 ft/s) . The CGT 
commanded a deceleration of 3 ft/s/s simultaneously with the reduced rate of 
descent; both of these commands cause 0 to go to an increased trim value* 


Several off-nomlnl cases have been run for the 4 controls case: these 
include variation of glideslope, airspeed, airplane weight and CG location. 
Simulation results show essentially the same regulation as those of figure 
7 . The airspeed/groundspeed feedback gain tradeoff was not simulated for the 
off-nominal cases. 


Failure Cases 

Simulation results for the following failure cases are to be compared to 
the modified configuration as shown in figure 8. Failure cases have been 
simulated with single control element failures at either the neutral (trim) 
position or at the maximum allowable excursion. Neutral postions are ( 1 ) - 4.8 

degrees for 6 , ( 2 ) zero degrees for 6 and ( 3 ) 8 degrees for 6 • All 

failures to be shown occur at time 30 seconds with FDI assumed to be^ 

operational as described in the section on the design example. Simulation 
results for failures at neutral are all similar to those shown in figure 8. 

An example case for a 6 failure at 8 degrees is shown in figure 9 . As 
expected. Ah regulation®?s slightly degraded due to the loss of the direct 
lift control. Larger control excursions can be seen in 6^ , although the 
control remains well within the linear region, and 6^ appears biased at a 
slightly lower trailing edge up position. 

Safe flight can be maintained with either control element failures 
6 or 6 at their maximum excursions; 6 command is position limited to +/- 
l8 degrees and 6 command is limited between 0 and 16 degrees. An example 
case is shown in f?gure 10 for a 6 failure at 10 degrees (trailing edge 
down). The stabilizer is forced to^a higher trailing edge up trim value, and 

is also seen to be more oscillatory, due to the low damped short period. Both 

. 

h,0 and q have Increased oscillations, although for the most part results are 
similar to those of the 4 controls design. 

Previous analysis has indicated that, for the case without external 
disturbances, safe flight can be maintained if 6 failures are limited 
between the range of -1 to -8 degrees (trailing e§ge up). This range is 
reduced considerably when external disturbances, representative of the Kennedy 
windshear and turbulence, are applied. Good control is malntaned with a 
6 failure at -2 degrees (figure 11 ), but a 6 failure at - 5.5 degrees 
(figure 12 ) shows marginal safety. In both cases, 6 activity is Increased 

to take over for the 6 failure, but for the case in figure 12, 5 saturates 

® e 
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edge down during the time period of the two major downbursts (figure 

6). The critical portion is during the decreasing downburst period, when 

^ ^ ‘ * 


altitude Ah increases and the forces and moments produces by 6 cannot 
overcome those produced by the decreasing downburst plus those dul to the 
^s addition, 6 saturates during the time period of headwind 

Figure 13 shows the airplane stalling with a 


to tailwind change, 
of -6.5 degrees. 


6 failure 
s 


Three Controls Design 


A new design was made to get an optimized set of feedback gains using 
only three controls 6 , 6 ) , leaving out the stabilizer. This new 

level of reconfiguration was done to determine if the range for overcoming a 
failure can be widened. A set of nominal weightings was put into the 
output feedback program, and the design was evaluated without readjustment. 
Nonlinear simulations were made with 6 commanded to trim values other than 
the 8 degrees used for design, in order fo add additional forces and moments 
to help overcome those produced by 6 . Figure 14 shows results for the 3 

controls design with a 6 failure at®-1.0 degree and 6 commanded to 12 
degrees after FDI. Figure 15 shows results for a 6 faf?ure at -6.5 degrees 
^sp commanded full down (0 degrees) after FDI.® Although this latter 
case is again marginally safe, the approach shows that improvement can be 
obtained by a redesign and the judicious use of control moments to counteract 
those resulting from the failure. 


CONCLUSIONS 

The objective of this paper is to describe a control law design that 
allows the airplane to recover to a safe condition for landing in the presence 
of a control element failure even though performance may be degraded. All 
sensors and computers are assumed to be fully operational, as well as failure 
detection and identification algorithms that supply needed information to the 
control logic. A PIF discrete control structure formulation is combined with 
a discrete output feedback design program to calculate the optimal feedback 
gains. Open loop feedforward gains are Included at the output of a command 
generator tracker. All flight equations are Implemented in Incremental form 
using total measurements. 


The longtudinal axis of a B-737 airplane is used for the design 
example. The PIF model Includes 7 plant states, 4 control position-command 
states, 4 integrator states to give type 1 properties to commanded outputs, 
and 4 control rate-command states to accommodate the computational delay and 
provide additional filtering. 


Closed loop eigenvalue analysis and Bode analysis have been made for a 
nominal 4 controls baseline design and three single failure cases. The non- 
reconflgured control law is unsatisfactory for the 6 failure case. The 
closed loop phugold mode is extremely low damped, and®the Bode gain and phase 
margins are very low. The reconfigured control law used a subset of the 
output feedback gains. The phugoid mode is relatively constant for all 
failure cases, whereas the short period mode shows large closed loop 
eigenvalue variations and has low damping ratios for 6 and 6 failures. 

All other closed loop eigenvalues remain relatively conitant. fEe lowest Bode 
gain margin is 7.3 db for a 6 failure with the 6 loop open. The phase 
margin is at least 45 degrees for all cases except for the case just 
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mentioned, which has a phase margin of only 18 degrees. All failure cases 
remain open loop statically stable except for the 6 failure case with one 
real positive eigenvalue at S«0.1. 

All designs are verified using a 6 degree of freedom nonlinear 
simulation. The command generator tracking evaluation demonstrated type one 
properties for all four integrator states, whereas non~lntegrated states are 
forced to new trim vaues. Investigation of failure cases at neutral position 
show similar results. 

All designs are tested under the conditions of the high severity Kennedy 
windshear reconstruction and thunderstorm type turbulence. A key feature is 
the allocation of velocity feedback gains between airspeed and groundspeed, 
which puts a lower limit on the allowable groundspeed to help prevent stall. 
Incorporation of this feature results in a reduced airspeed drop during a loss 
of headwind, nonsaturation of pitch attitude remaining under 12 degrees 

during the severe downdraft and reduced headwind/increased tailwind portion of 
flight, and a relatively constant aerodynamic angle of attack. The 4 controls 
design shows that the airplane lands with a low rate of descent, as commanded, 
and with a small pitch up attitude. Reducing airspeed and rate of descent 
forced the pitch attitude to the new trim condition. 

During simulation, failures occurred 30 seconds into the run, with the 
assumption that FDI is fully operational. Simulation of control element 
failures at neutral show results very similar to the 4 controls design. Safe 
flight can be maintained with either the elevator or spoilers failed at any 
hard over position. 

On the B-737, the stabilizer must fail within a limited range to overcome 

the control moments. Without extenal disturbances, the elevator can overcome 

these moments if 6 remains in the range from -1 to -8 degrees (trailing 

edge up). With the addition of the Kennedy windshear and turbulence, the 

6 failure range for the 4 controls design is reduced to the region of -2 to 

-5.5 degrees. A redesign, restructuring the three remaining operational 

controls and a set of nominal weightings without readjustment, shows that the 

6^ range can be widened (-1 degree to -6.5 degrees). During simulation for 

the latter case, the spoilers are commanded to new steady state values to help 

produce moments compensating those produced by 6 • 

s 
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APPENDIX A 


MATHEMATICAL FORMULATION 

A PIF/CGT formulation has been Integrated with a discrete output feedback 
design Progr^. Special features of the PIF structure have been dLcribed in 
the paper. This appendix contains the mathematical description of the PIF 
structure, output feedback equations, command generator equations and the 
equations implementd for simulated flight. 


PIF Formulation 

The continuous time design model using the PIF form is given by 


Ax = 

A 

Ax + 

B Av + E Aw 

(Al) 

Ay = 

H 

+ 

1 X 
< 

n 

(A2) 

Ax 

= [ 

A T 

Ax , 

A T . TiT 

Au , Az J 

(A3) 

Aw = 

= [ 

A T 
Aw , 1 

T -1 T 

J 

z -J 

(A4) 

A = 

“ A 
0 

B 0 ■ 
0 0 


(A5) 


H 

^ z 

D 0 
z J 




B 


0 

I 

0 


(A6) 


E 0 
0 0 
0 I 


(A7) 


where Ax is the plant state, Au is the control position-command state, Az is 
the integrator state, Av Is the control rate-cotnmand, Aw Is the wind gust, 
n^ is the noise on the integrator state. Ay is the output vector, n Is the 
output noise, A and B are the plant state and control matrices, E is the wind 
^st mtrlx, H is the output matrix, H and D are transmission matrixes 
for the plant and control states to be integrated, and I is an identify 
matrix. 


The discrete form of equations (Al) and (A2) is obtained using the 
ORACLES computer program (ref. 19) as 


^^k+l ~ ^ G Aw^ 


Ay,. 


= H 




(A8) 

(A9) 


1 0 



where F, G, and are the discrete matrices corresponding to A, B, and 
E respectively. Approximations (ref. 8) are made to F and G in order to 
Implement both a zero-order hold for the control rate-commands (as compared to 
a triangular data hold) and an Euler discrete integration. The final form for 
both F and G become 


F 


G 


F G 0 

0 10 

AT. H AT. D I 
z z 

0 

AT. I 
0 


where AT is the discrete sampling period. 


(AlO) 


(All) 


Output Feedback Equations 

A stochastic discrete optimal output feedback design program (ref. 17) 
has been used to compute feedback gains for the selected outputs of equation 
(A9). Starting with the continuous time cost function J given by 
^ _T _ _ 

J = E(J [ Ax Q Ax + Av R Av J dt ) (A12) 

0 ^ _ 

where E is the expected value and where Q is a dlagnonal state weighting 
matrix with components given by 

Q = dlag [ 0^, R^, 0^ J (A13) 


with Q the weighting for the Ax plant state, R the weighting for the 
Au control position-command state, and Q the weighting for the 
Az integrator state. The weighting for t^e control rate-command state is 
represented by the diagonal R . All weightings, described in the next 
section, are inserted into equation (A12). 


17, 

J 


The equivalent discrete performance index, which is required in reference 
is defined as 


N 

N^« ^ ^ ^ 5: AxJ ^ A^J^ + 2AXj^^ ^ AVj^ + AvJ i AVj^) 


(A14) 


where x), n, are the discrete weighting matrices corresponding to Q and 
R^ as calculated using reference 19 for sampling period AT . 


The optimal feedback gains K are directly related to the output 
measurement as 


AVj^ = K Ayj^ (A15) 

with the corresponding closed loop transition matrix F^j^ as 

F = F + G K H 
cl 


(A16) 



The output feedback formulation also Includes both plant process noise 

distributed initial condition errors, control input random pseudonoise, random 
wind gust disturbances, and integrator noise. The total plant process noise 


covariance ^ is calculated as 




- - _T AT _ _ T T T 

F F + /[exp (A t) ] [B B + E E ] [exp(A t) ] dt 


E(Ax ) - 0 
o 


E(Ax Ax^^) = X 6 


E(Av) = 0 
E(Av Av"^) 


E(Aw)= 0 


o tT 


= V 6, 

O tT 


(A17) 

(A18a) 

(A18b) 

(A19a) 

(A19b) 

(A20a) 


E( Aw Aw ) 


W 6, 

O tT 


(A20b) 


\ Initial condition covariance, V is the control input 

pseudonoJse covariance , is the wind gust and ?ntegrator noise coLriance, 

t is a dummy time variable, and 6 is the Kronecker delta. The integral 

freferLS“?9^°" transformJd to discrete formulation using ORACLS 

( eference 19). The measurement noise covariance V is calculated in a 
Similar manner as 

® ^ ® (A2U) 


E(nn ) = V6 


tx 


(A21b) 


Command Generator Tracking (CGT) 


objective of CGT is to cause selected outputs Ay of the airplane to 
ptlmally track the output Ay of a linearized command model using 
plant theory, ufing symbology defined previously, the open loop 


^\+l 


= F 






(A22) 


Ayt 


“ \ A\ 


(A23) 


and the linearized command model is 



(A24) 


Ax 


m,k+l 


F Ax , 
m m,k 


+ G Au 


Ay 1 = H Ax , 

*^m,k m m,k 


+ D 


m 


m 

Au 


m,k+l 
m,k+l 


(A25) 


The reason for using an advanced time step on the control conunand Au^ is 
to resolve a mathematical contradiction due to the discontinuity when 
Au changes. A more complete description is presented in reference 8 and 
chapter 4. 10 of reference 9. Feedforwaed gains relate the model state 


* * 

(Ax ) and Au to an ideal star trajectory Ax , Au as 


m 


m 


1 

•K 

< 

1 

8 

" All 

A12 “ 


I 

J 

<3 

1 

1 

> 

J 


^ A21 

A22_ 


-^%,k+iJ 


(A26) 


where each Aij represents a constant feedforward gain matrix. The solution 
for the feedforward gains Involve the solving of equation A27 as 


’ All 

AI2' 


"(F-I) 

G* 

-1 

"ah (f-i) 

m 

All G ^ 
m 

_ A21 

A22_ 


H 

L- z 

D 

Z-J 


H 

i- m 

D 

m -J 


The derivation of equation(A27) and a method to solve it are presented in 
reference 11. 


Flight Equations 

The CGT model is integrated into the feedback design by letting the 
pertubation model (eq. A8) represent the error between the plant perturbation 
states and controls and the star trajectory perturbation states and 
controls. Using an incremental control law form and rigorously substituting 
total quantities into the perturbation model similar to reference 8 (full 
state feedback as opposed to output feedback for this paper), the flight 
equations become 


‘'k • >’k - "x 


X 1 
m,k 


(A28) 


= (I + at K H^) + K(e^ - e^.j) + 

at k (h^ Vi ' y.,.k-i> ^ 

®‘<".,k+l ■ “m.k* 


(A29) 
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where 


\+l 

It 

+ 

> 

H 

(A30) 

H = 

[H H H ] 
X u z 

(A31) 

El = 

-K[H A12 +H A22 + H Pj 
X u z A^ 

(A32) 

"a = 

-P~l [ p3, A12 + P^ A22 ] 
zz xz uz 

(A33) 


T T 

**xz’ ^uz’ ^zz the last z rows of the optimal output 

feedbacK solution matrix of equation of A14. 


APPENDIX B 


FEEDBACK WEIGHTING APPROACH WITH FEEDBACK AND FEEDFORWARD GAINS 

Feedback Gains 


The weighting approach used for 0 and R (equation A12) is to 
calculate the inverse square of the maximum permissible deviations 
(AMax) from the nominal state and control time histories. Table II shows the 
following columns for each design variable (Ax, Au, Az , Av, Aw, Ay) : 

(1) AMax, (2) initial condition uncertainties and (3) random noise. All of 
this data is used to calculate the weightings in Table III for the output 
feedback design program. Only two variables are shown for Ay in Table II 
since three of the_ Ax states and all of the Au and Az states, which are 
Included in the Ay vector, are given above in the random noise column. 

Output feedback gains K (see eq. A15) for the 13 outputs Ay going to the 4 
control rate-commands Av are shown in Table IV. 


Feedforward Gains 

The Integrator states defined in equation (3) for the feedback design are 
chosen to be the same as the outputs Ay of the linearized command generator 
model. The specific model used has the™form corresponding to equations (A24) 
and (A25) as: 


1,4.1 = AZ , + [AT 0 0 0] 

m,k+l m,k ^ 


AZ 


m 


AV 


A6 

e 

A6 


a,m 

e,m 

j 

sp,m 


k+1 


(Bl) 
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(B2) 


AZ 


1 


“o 0 0 0*“ 


"az 

m 






m 

AV 


0 


0 10 0 


AV 

a,m 






a,m 

A6 


0 

AZ , + 

0 0 10 



e,m 



m,k 



e,m 

A 


0 


0 0 0 1 



sp,m 

U ‘‘ mi 

k 





sp ,m 


Using equation (A27), the feedforward gains become 


All = 


0 . 

0 . 

0 . 

0 . 

1 . 

0 . 

0 . 


(B3) 


A12 


-2.65E-3 

3.64E-2 

0 . 

-4.47E-3 

0 . 

-3.25E-1 

-3.97E-2 


1 . 03E+0 
4.42E-1 

0 . 

-2.15E-1 

0 . 

4.58E-2 

4.09E-2 


4.71E-6 

-6.47E-5 

0 . 

-3.01E-7 

0 . 

1.14E-5 

-3.19E-1 


-1.17E-1 

1.61E+0 

0 . 

7.51E-3 

0 

3.85E-1 

1.09E-1 


(B4) 


A21 


0 . 

0 . 

0 . 

0 . 


(B5) 


A22 


-6.51E-1 

-5.96E-2 

0 . 

0 . 


9.16E-2 

6.13E-2 

0 . 

0 . 


-2.28E-5 

-4.79E-1 

1.00 

0 . 


7.70E-1 

1.64E-1 

0 . 

1.00 


(B6) 
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SYMBOLS 


A 

A 

A11,A12 

A21,A22 

B 

B 


c 

D 

m 

D 

2 

E 

E ( ) 

E 

El 

e 

F 

F 



F 

m 

G 


G 


M 


G 

m 

G 

w 

H 


H ,H 
X u z 


H 

m 


plant continuous state matrix 
PIF continuous state matrix 

feedforward gains 

plant continous control matrix 

PIF continuous control matrix 

coefficient for airspeed and groundspeed feedback gains 
control observation matrix for command model 
transmission matrix for control integrator states 
wind gust disturbance matrix 
expectation operator 
PIF disturbance matrix 

control matrix for incremental flight equations 

error vector used in incremental flight equations 

plant discrete state transition matrix 

PIF discrete state transition matrix 

discrete closed loop transition matrix 

command model discrete state transition matrix 

discrete plant control matrix 

PIF discrete control matrix 

gain margin 

command model discrete control matrix 
PIF discrete disturbance matrix 
PIF state observation matrix 

column partitions of H corresponding to x,u»z states 
command model state observation matrix 
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H, 

h 

h 
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J 

K 

k 


A 

M 

N 


n 


n 

z 



P ,P ,P 
xy uz zz 


Q 

«( 


q 

i 

R 

\ 

R 

1 

S 

t 

U 


u 


Integrator output observation matrix 
altitude of airplane, positive up (ft) 
command model vertical acceleration (ft/s/s) 
identity matrix 
cost function 

optimal feedback gain matrix 
sample integer 

PIF discrete cost function cross weighting matrix between 
states and controls 

number of samples in discrete performance index 

noise on PIF outputs 

noise on integrator outputs 

discrete feedforward matrix 

phase margin 

last z rows of output feedback solution matrix 
corresponding to x, u, and z respectively 

PIF continuous state weighting matrix 

PIF discrete cost function state weighting matrix 

subset of Q relating to x plant states or z integrator 
states respectively 

pitch rate (rad/s for equations) (deg/s for plots) 

PIF discrete cost function control weighting matrix 

subset of Q for u control states 

PIF continuous control weighting matrix 

eigenvalue (rad/s ) 

time (sec) 

body longitudinal axis inertial velocity component, 
positive forward (ft/s) 

control position-command state vector 
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I 


u 

m 

V 


V 

a 

• 

V 

Byin 

V 

g 

V 

o 


V 


W 




W 

o 


w 


X 

X 

o 

X 

X 

in 

X5 


s 


X6t 

y 



Z 

z 


z 


a 


command model control vector 
measurement noise covariance matrix 
airspeed (ft/s) 

command model longitudinal acceleration (ft/s/s) 
groundspeed (f t/s ) 

control input process noise covariance matrix 
control rate-command vector 

body vertical axis inertial velocity component, positive 
down (ft/s) 

total plant process noise discrete covariance matrix 

plant process noise covariance matrix for random wind gust 
and integrator noise 

wind gust and Integrator noise vector 

initial condition error vector 

plant state vector 

PIF state vector 

time derivative of PIF state vector 
command model state vector 
stabilizer servo filter state 
throttle dynamics filter state 
plant output measurement vector 
output related to the x plant states 
PIF output vector 
command model output vector 
negative of h, (ft) 

time derivative of Z, positive down (ft/s) 

Integrator state vector 
aerodynamic angle of attack (deg) 
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Y 

A 

AT 

6 

e 

6 

8 

6 


sp 


6 

6 

C 


th 

tx 


0 


(I) 


flight path angle (deg) 
perturbation 

discrete sampling period (sec) 
elevator control (deg) 
stabilizer control (deg) 
spoiler control (deg) 
throttle control (deg) 

Kronecker delta 
damping ratio 

pitch attitude (rad for equations) (deg for plots) 
radian frequency (rad/s) 


Subscripts 

m 

z 


command model 
Integrator terms 


Superscripts 

T 

* 


transpose 

Ideal star trajectory 
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Table 1 - Eigenvalue and Bode Data 


N) 

N> 


OPEN LOOP 


CLOSED LOOP 


Plant 


£ 

-0.019+.17J 
-0.59 +1.1j 
-1.5 
- 2.0 


A Control s 


6 s Failed 


6 e Fa 1 1 ed 


6 sp Failed 




I i 


S 


.11 

.‘*7 


-.38+.58J I .55 
-1.47+2.3j, .5^ 

- .23+.19jl .76 

- . 60 +.l 6 j| .97 


- I . u I 

-2.A+2.3j .73 

-2.7 I 

-7.7 


-.31+.71J 

-1.6+l.Oj 

-.22+.20J 

-.67+.12j 


-1.5 

-1.9 

-2. 9+2. A J 

-3.1 


I i 


I 


AO 

.85 

.75 

.98 


I 

I -77 


i I i 

-.i»5+.6itj I .58 
-.38+1.3J I .27 
-.23+.19j I .76 
-. 87 +.l 6 j , .98 
-.70- I 

I 

-2.5+2.2J I .75 
- 2.6 ' 



1 i 

-. 26+. 52 j 

1 •'*5 

-.78+2. 7 j 

1 .28 

-.21+.20J 

! •7'» 

-.50+.13J 

.97 

-.76 
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Table II* “ Data for Selection of State and Control Weightings, Process Noise Covariance, 
Measurement Noise Covariance 
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Aw 
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Ax 

q 
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Table 111. - Weighting for Output Feedback 
Design Program 
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Table IV - Feedback Gains 
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Figure 2 - CGT, 4 controls baseline design. 
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Figure 3 - CGT, 5 failure at 10 degrees, no reconfiguration. 
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Figure 7-4 controls design, Kennedy windshear, velocity feedback on V . 
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Figure 7 - concluded. 
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Figure 8-4 control design, V„ and V feedback, Kennedy windshear. 
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Figure 9 - 6 failed at 8 degrees, Kennedy windshear. 
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Figure iO - 5^ failed at 10 degrees, Kennedy windshear. 
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Figure 12 - 6^ failed at -5.5 degrees, Kennedy windshear. 
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Figure 13 - 6^ failed at -6.5 degrees, Kennedy windshear. 
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Figure 14-3 controls design, 6 failed at -1 degree, 6 commanded to 12 degrees, Kennedy windshear. 
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Figure 15-3 controls design, 5^ failed at -6. 5 degrees, 6 
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coirmanded to 0 degrees, Kennedy windshear. 







1. Report No. 

NASA TM-85759 


2. Government Accession No. 


3. Recipient's Catalog No. 


4. Title and Subtitle 

Reconf igurable Multivariable Control Law for Commercial 
Airplane Using A Direct Digital Output Feedback Design 


7. Author(s) 

Aaron J. Ostroff and 
Richard M. Hueschen 


9. Performing Organization Name and Address 

NASA Langley Research Center 
Hampton, VA 23665 


12. Sponsoring Agency Name and Address 

National Aeronautics and Space Administration 
Washington, DC 



6. Performing Organization Code 

505-3^-13-10 


8. Performing Organization Report No. 


10. Work Unit No. 


11. Contract or Grant No. 


13. Type of Report and Period Covered 
Technical Memorandum 


14. Sponsoring Agency Code 



16. Abstract 

The ability of a pilot to reconfigure the control surfaces on an airplane after a 
failure, allowing the airplane to recover to a safe condition for landing, becomes 
more difficult with increasing airplane complexity. Techniques are needed to 
stabilize and control the airplane immediately after a failure, allowing the pilot 
time to make longer range decisions. This paper shows a design of a discrete multi- 
variable control law using four controls for the longitudinal channel of a B-737- 
Single control element failures are allowed in three of the four controls. The 
four controls design and failure cases are analyzed by means of a digital airplane 
simulation, with regard to tracking capability and ability to overcome severe wind- 
shear and turbulence during the approach and landing phase of flight. 


17. Key Words (Suggested by Author($)) 

Reconf igurat ion 
Restructurabl e 
Control 

Multivariable Control 
Commerc ia 1 Airplane 


19. Security Qassif. (of this report) 
Unclassified 


18. Distribution Statement 

Unclassified - Unlimited 


20. Security Clauif. (of this page) 

21. No. of Pages 

Unclass i f ied 

55 


Subject Category 08 


22. Ptico 

A04 


N-305 


For sale by the National Technical Information Service, Springfield. Virginia 22161 























